Splunk support and quality of life additions
- Added global debug commandline parameter
you can now use the -debug flag on the commandline to get debug output for all (selected) actions
- Added custom lookback commandline option for KQL queries
you can override the 15m setting in all Kusto queries from the commandline with the -lookback parameter
- Added Splunk query support with one example action
Splunk query support is working, support for additional actions is welcome via PR to dev
Breaking changes:
- Changed the Splunk config file to support querying and output.**
Review the config.yml-sample for required and changed items